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ABSTRACT 



A system controls reproduction of a video transmission 
between a transmitter and a receiver. The system includes an 
encryptor with an offset generator adapted to receive the 
encrypted frame key and to generate a sequence, of pseudo- 
random values for the color component; and an adder 
coupled to the offset generator and to the color component 
signal for providing an encoded color component signal. The 
system also includes a decryptor with a decryptor offset 
generator adapted to receive the encrypted frame key and to 
generate a decryptor pseudo-random value for the color 
component; and a sub tractor coupled to the offset generator 
and to the color component signal for subtracting the offset 
signal from the color component signal. 

25 Claims, 10 Drawing Sheets 
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METHOD OF PROTECTING HIGH 1394. However, there presently is not a cost-effective digital 

DEFINITION VIDEO SIGNAL transmission interface for transmitting uncompressed high 

definition digital video for consumer applications which 
require transmission rates of greater than 1 Gigabit/second. 

BACKGROUND OF THE INVENTION s F or example, the fastest current IEEE-1394 interface stan- 

Inexorable advances in consumer electronics have led to dard supports transmission rates of less than 400 Megabits/ 

affordable digital video devices capable of rendering crisp second - Usin S compressed bitstreams to transfer the digital 

images with high fidelity audio. The emergence of digital data me ^ to P box to thc receiver is problematic 

video devices with recording capability represents a signifi- because the transmitter needs a high definition Motion 

cant threat to content providers, since the content of high ™ Pictures Experts Group (MPEG) encoder to handle locally 

quality digital programs can be easily duplicated. The generated video information such as on screen displays or 

motion picture, film and video industry estimate that sub- electronic program guides. Additionally, high definition 

stantial sums have been lost annually due to unauthorized MPEG encoders are not cost effective for consumer appli- 

duplication. Such unauthorized duplication deprives the cations, 

rightful owners or distributors of program content of their 35 
income and reduces their incentive to produce new movies 

and videos. Thus, the protection of program contents espe- xhe invention provides a transmitter for encoding video 

cially high definition digital program content, from unau- transmission to a receiver, the transmitter and the receiver 

thorized copying is an important problem facing the con- communicating over a digital interface and a video interface, 

sumer electronics industry. 20 The digital interface communicates a frame key encrypted 

Due to the need for a secure transmission of programs, a between the transmitter and the receiver, while the video 

number of video encoding or scrambling techniques have interface having a color component signal. The transmitter 

been developed to provide control over potential recipients includes a sequence generator adapted to receive the original 

and to prevent unauthorized use of received transmissions. frame key and to generate a sequence of pseudo-random 

For instance, to block reception by non-subscribers, televi- 25 values for the color component; and a transformation circuit 

sion subscription networks typically encode or scramble the connected to the sequence generator and to the color com- 

distributed television signals, thereby defeating acceptable ponent signal for providing an encoded color component 

display of those television signals by non-subscribers who signal. 

do not have the proper decoders or descramblers. ^ Implementations of the invention include one or more of 

However, an authorized subscriber may simply connect a the following. A range clamp may be positioned between the 

video recorder to bis decoder to record for subsequent and color component signal and the transformation circuit for 

repeated viewing a desired program that is distributed over restricting the value of the color component signal to a 

the subscription network. Such recording for later viewing predetermined range. An encrypted region generator may be 

decreases the market interest in subsequent distribution of 35 connected to the transformation circuit for limiting the set of 

that program over the subscription network. For instance, transformed pixels to a predetermined region of a video 

"pay per view" broadcasts contemplate a once-only distri- frame. The transformation circuit may be an adder. A new 

bution of video programming such as first run motion offset may be generated for each scan line. A delay memory 

pictures, popular sporting events and special entertainment for time-shifting the output of the transformation circuit may 

events to subscribers who are charged a one-time fee to 4Q be used. 

receive that particular program. Such one-time broadcasting In a second a receiver decodes video transmission 

is quite sensitive to unauthorized reproductions which erode from thc transmitter. The receiver includes a decryptor 

the value of the content of the pay-per-view transmission, seqU ence generator adapted to receive and decrypt the frame 

Since the scrambling or encoding of the video signal key and to generate a sequence of pseudo-random values for 

cannot prevent a paying subscriber from recording the 45 the color component; and an inverse transformation circuit 

program, it is desired that the video signal be modified so connected to the decryptor sequence generator and to the 

that the subscriber can view the program, but the operation color component signal for decoding the color component 

of recording equipment should.be defeated or tightly con- signal. 

trolled to avoid unauthorized recording. Implementations of the invention include one or more of 
Traditionally, with monitors or display devices that accept 50 the following. The inverse transformation circuit includes a 
analog input signals, methods for making the video signal subtracter for subtracting the pseudo-random value from the 
non-recordable have relied upon adjusting an automatic gain color component signal. A comparator may be connected to 
control (AGC) circuit normally included in a videotape the subtracter, the comparator determining whether the 
recorder. Other techniques for modifying the video signal to output of the subtractor exceeds a minimum value; a mul- 
prevent its recording or reproduction rely on the relative 55 tiplexer may be connected to the comparator and receiving 
sensitivity of a vertical sync detection circuit normally a fi rs t value and a second value, the multiplexer outputting 
provided in videotape recorders. The removal of a portion of the first value if the output of the subtractor exceeds the 
the pulses intended for a vertical blanking interval causes a minimum value and otherwise outputting the second value; 
vertical synchronizing detector included in most videotape and an adder may be connected to the multiplexer and to the 
recorders to be unable to detect those vertical sync pulses, 60 subtracter. A gain/offset adjuster may be connected to the 
resulting in a loss of control information needed for the adder. The transmitter may have a delay memory for time- 
proper operation of the videotape recorder. shifting of pixel values to be transmitted. A receiver delay 
The advent of digital video recorders that accept high memory may be used for inverse time-shifting of transmitted 
definition analog video inputs has necessitated new solu- pixel values. A pixel clock generator may be connected to 
tions for protecting the high definition content. Methods 65 the color component signal for generating a clock signal, 
have been developed for encrypting digital data for trans- The pixel clock generator includes a phase locked loop 
mission over high speed digital interfaces, such as IEEE- which aligns the clock signal with a video sync pulse. 
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In another aspect, a method for controlling reproduction 
of video transmission between the transmitter and the 
receiver, including: communicating a frame key over the 
digital interface; generating a sequence of pseudo-random 
offsets for the color component signal based on the unen- $ 
crypted frame key; generating an encoded color component 
signal using one of the pseudo-random offsets; and trans- 
mitting the encoded color component signal over the video 
interface. 

Implementations of the invention include one or more of 1Q 
the following. The method includes seeding a pseudo ran- 
dom number generator with the encrypted frame key. The 
method includes periodically generating a new encrypted 
frame key; and initializing a pseudo random number gen- 
erator with the new encrypted frame key. The method 
includes scaling the color component signal with a prede- 15 
termined ratio; and adding an offset to the scaled color 
component signal. The method includes clamping the color 
component signal within a predetermined range. The clamp- 
ing step further determining if the value of the color com- 
ponent signal is less than a first value and if so, setting the 20 
value of the color component signal to the first value; and 
determining if the value of the color component signal is 
greater than a second value and if so, setting the value of the 
color component signal to the second value. The method 
includes determining whether each pixel is in an encrypted 25 
boundary; and transmitting the pixel unencrypted if the pixel 
is outside of the encrypted boundary. The method includes 
converting the encoded color component signal to an analog 
signal. The method includes shifting each pixel value in time 
within the predetermined pixel range, wherein the shifting 30 
further comprises providing the encoded color component 
signal to a delay memory. The method includes decrypting 
the color component signal sent over the video interface by 
receiving the encrypted frame key over the digital interface; 
generating a sequence of pseudo-random oflsets for the 35 
color component signal based on the encrypted frame key. A 
pseudo random number generator may be generated with the 
frame key. The method may subtract the pseudo -random 
offset from the encoded color component signal. The method 
includes compensating for out-of-range values associated 40 
with the subtracting step and/or resealing the color compo- 
nent signal to its original input range. The method includes 
shifting each pixel value within the predetermined pixel 
range prior to the step of transmitting the encoded color 
component signal over the video interface. The method 45 
includes undoing the pixel shift operation using a delay 
memory. The method includes displaying the color compo- 
nent signal after decrypting the encoded color component 
signal. 

In another aspect, a method for controlling the reproduc- 50 
tion of a video transmission between the transmitter and the 
receiver includes authenticating the transmitter and the 
receiver using the digital interface; periodically transmitting 
an encrypted frame key to the receiver over the digital 
interface; generating a pseudo-random offset at the trans- 55 
mitter for each color component signal during an active part 
of a scan line; applying the pseudo-random offset to the 
color component signal to generate an encoded color com- 
ponent signal; transmitting the encoded color component 
signal over the video interface; generating the pseudo- 60 
random offset at the receiver based on the decrypted frame 
key; removing the pseudo-random offset from the encoded 
color component signal transmitted over the video interface 
to generate a decoded color component signal; and display- 
ing the decoded color component signal on a display device. $5 

In another aspect, a system controls the reproduction of 
video transmission between the transmitter and the receiver. 
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The system having an encryptor with an offset generator 
adapted to receive the original frame key and to generate a 
sequence of pseudo-random values for the color component; 
and an adder connected to the offset generator and to the 
color component signal for providing an encoded color 
component signal The system also having a decryptor with 
a decryptor offset generator adapted to receive and 
decrypted the frame key and to generate a decryptor pseudo- 
random value for the color component; and a subtractor 
connected to the offset generator and to the color component 
signal for subtracting the offset signal from the color com- 
ponent signal. 

Implementations of the invention include one or more of 
the following. The color component signal includes one of 
red, green and blue (RGB) video signals, one of luminance 
and chrominance video signals, or a black and white video 
signal. 

Advantages of the invention include one or more of the 
following. The invention controls the recording and repro- 
duction of high quality program content, particularly when 
the program content is transmitted from one consumer 
device, such as a set-top box or a personal computer, to 
another consumer device, such as a monitor. Unauthorized 
duplication or piracy of high quality program content from 
digital storage media, cable and broadcast television mate- 
rial is avoided. The security of the video transmission is 
achieved while maintaining a high picture quality. By oper- 
ating on the video output signals, the invention avoids the 
need to compress the entire high definition program locally 
with information generated by on screen display devices 
(OSDs) or other graphic devices such as 3D video control- 
lers. The invention also avoids the need to decompress the 
video bitstream at the receiver. The piracy protection of the 
program content is achieved cost effectively. 

Other features and advantages of the invention will 
become apparent from the following description, including 
the drawings and claims. 

BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 is a diagram of a system for controlling reproduc- 
tion of high quality program content. 

FIG. 2 is a block diagram illustrating in more detail the 
encryptor of FIG. 1. 

FIG. 3 is a block diagram illustrating in more detail the 
decryptor of FIG. 1. 

FIGS. 4A and 4B are block diagrams illustrating circuits 
to further inhibit unauthorized recording. 

FIG. 5 is a flowchart illustrating a process for encrypting, 
transmitting and decrypting video content. 

FIG. 6 is a flowchart illustrating in more detail the 
encryption process in FIG. 5. 

FIG. 7 is a flowchart illustrating in more detail the 
decryption process in FIG. 5. 

FIG. 8 is a diagram of a second embodiment of the system 
for controlling reproduction of high quality program con- 
tents. 

FIG. 9 is a block diagram illustrating in more detail the 
digital encryptor of FIG. 8. 

FIG. 10 is a block diagram illustrating in more detail the 
digital decryptor of FIG. 8. 

DESCRIPTION 

FIG. 1 shows a transmitter-receiver pair which is adapted 
to display high definition program content. A transmitter 110 
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receives a high definition compressed bitstream from a an interlaced series of horizontal lines which are transmitted 

network 102. Network 102 may be a cable, terrestrial or sequentially in time. The transmitted signal is a continuous 

satellite broadcast network. Alternatively, other suitable analog of a brightness intensity corresponding to each pixel 

digital program sources such as DVD, digital tape, or hard of * line. Each line has a period during which video 

disks may be used. Transmitter 110 communicates with 5 information is transmitted (active line). Any two adjacent 

network 102 using a network interface module (NIM) 112. active Une periods are separated by a period in which no 

The output of the NIM 112 is an encrypted video bitstream Xj d . eo . inform ?u?n is transmitted (line blanking interval), 

which is directed to a descrambler 114. Descrambler 114 ^h* ^ terval » miI0 ^ d to a ™"« **** ( not 

allows only an authorized user to decode a particular pro- sh ° wn) ^ receiver 140 to reset a line start counter 

gram (pay-per-view). For instance, certain channels offer 10 , Digital interfaces 128 or 142 transfers data which is used 

movies, sports, or special events and charge by the movie or £ r ^nticahon and subsequent transmission of encrypted 

r rT » . i .1 A + A 4 * -j frame keys between transmitter 110 and receiver 140. 

program. Through descrambler 114, a content provider A .i. *■ «• j . • ■ * . j i 

r 7 , t i_r i.j i_i jj ++a Authentication and transmission of encrypted keys can use 

controls which channels to descramble and descrambler 114 knoWQ t hic protocols based on public key 

allows the pay-per-view programs to be viewed only after encryption> for example me elliptic ^ signature 

payment or authorization. 15 and key exchange algorithms described in IEEE P1363. The 

The output of descrambler 114 is provided to a Motion authentication protocol results in a shared session key 

Pictures Experts Group (MPEG) decoder 116. MPEG between the transmitter and receiver. Using a secret random 

decoder 116 decompresses video data by first decoding a number generator, the transmitter generates a sequence of 

reference frame and then decoding subsequent frames in frame keys. The transmitter encrypts each frame key using 

terms of changes from the reference frame. This process 20 the session key with a symmetric encryption algorithm such 

efficiently transmits motion video since much of the image as D£S, and sends it to the receiver over digital cable 130. 

data remains constant from one frame to another frame. Receiver 140 decrypts the frame key using its copy of the 

The output of MPEG decoder 116 is provided to an on session key. The decrypted frame key is used to seed a 

screen display (OSD) buffer 118 which is controlled by a pseudo -random number generator. The pseudo -random 

Central Processing Unit (CPU) 122. CPU 122, through OSD 25 number generator, as discussed below, is used to generate 

buffer 118 can augment the video decoded by MPEG three random values for each line of each video frame. An 

decoder 116 to provide supplemental information, such as identical pseudo -random number generator is used by the 

channel guide or web browsing, on a monitor screen. transmitter to generate the same three random values for 

CPU 122 is also connected to an encryptor 120 which is 3Q each line of each video frame. Since the decrypted frame 

shown in more detail in FIG. 2. The output of encryptor 120 keys are not known to unauthenticated receivers, the random 

is provided to a video digital to analog converter (DAC) 132 . values cannot be duplicated by eavesdropping on serial ports 

Since color is supported, video DAC 132 has three outputs, 128 or 142, even if the pseudo -random number generation 

one for each of the red blue green (RGB) channels. process is known. Transmitter 110 can transmit new frame 

Alternatively, the video DAC outputs may drive one or more 35 keys at regular intervals to ensure that security is maintained 

component video signals with luminance and chrominance even if one encrypted frame key is compromised. The 

(color difference) signals (YC R C B ). Further, the video DAC interval between frame keys can be several frame times, so 

outputs may support one channel, such as the channel in the communication speed of serial ports 128 or 142 can be 

NTSC or PAL, or two channels such as those in S- video with slow compared to the speed associated with the transmission 

a luminance signal and multiplexed chrominance signals. 4Q of uncompressed video data over video cable 134. 

Referring now to FIG. 1, the outputs of video DAC 132, Referring now to FIG. 2, encryptor 120 is shown in more 

which carry encrypted high definition video signals with detail. Encryptor 120 has an offset sequence generator 200 

embedded sync signals, are provided to an video cable 134. which receives as inputs an unencrypted frame key input and 

Video cable 134 may be bundled with a digital interface a line increment input Offset sequence generator 200 is 

cable 130 as one cable or separately as two cables. 45 controlled by CPU 122 (FIG. 1). The frame key input is used 

CPU 122 is also connected to a random access memory as a seed to initialize a pseudo -random number generator in 

(RAM) 124, a read-only memory (ROM) 126, and a digital offset sequence generator 200. 

interface such as a serial port 128. The output of serial port Offset sequence generator 200 uses the seed to generate a 

128 drives digital interface cable 130. Serial Port 128 new sequence of pseudo-random numbers. If offset 

transmits and receives digital data, such as encryption and 50 sequence generator 200 is subsequently called with the same 

decryption related information. Other information, such as seed, the sequence of pseudo-random numbers will be 

the number of copies that a user is authorized to make, is repeated. The pseudo-random number generator may 

also transmitted over serial port 128 and cable 130. execute the following functions for example: 

Low bandwidth digital data is transmitted over digital 

interface cable 130 to and from a port 142, which may be a 55 

serial port, on receiver 140. Serial port 142, is connected to ! ! ~ ! " 

• 11 s^™ t -t a a * 11 t a a • static unsigned long int next - 1; 

a micro-controller or CPU 144. Microcontroller 144 in turn ^ myran d(void) /* Rand_MAX assumed to be 32767 7 

is connected to RAM 146 and ROM 148. Additionally, { 

receiver 140 receives video signals from video cable 134. ™*l - "«*t * 1103515245 + 12345; 

The video signals are processed by decryptor 150, which is 60 retum((unsigned int) (next/65536) % 32768); 

shown in more detail in FIG. 3. Video content which appears ; oid mysrandCumigned int seed) 

at the output of decryptor 150 is provided to a plurality of { 

video drivers, one of which drivers, 152, is shown. Video - 6Ccd ; 

drivers 152 in turn drive a display device 160 such as a * 

cathode ray tube (CRT) or plasma display. 65 

Transmitter 110 and receiver 140 operate on a series of In response to the line increment input which tells encryp- 

video frames. Each frame is generated using a progressive or tor 120 to generate the next video line, offset sequence 
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generator 200 generates three random values, one for each three outputs of DAC 302 are respectively provided to the 

color component. The three random values for each scan line three inverse transformation circuits, such as subtractors 

are used to generate a separate offset for each analog signal 304, 314 and 324. Additionally, each component of the RGB 

component during an active and changing part of the scan or YC R C B video input signal is respectively provided to the 

line. Given a particular frame key, offset sequence generator s second input of subtractors 304, 314 and 324. The inverse 

200 provides a fixed sequence of offsets for each video line. transformation circuits "undo" the results achieved by the 

The fixed sequence can be generated on both the transmitter transformation circuits of FIG. 2. 

side and the receiver side so that each uses the same set of The output of sub tractor 304 is provided to one input of 

offsets. The secrecy of the frame key is maintained through a comparator 306, The other input of comparator 306 is 

encryption. Furthermore the frame key can be changed at 10 connected to an input value set to Min Value. The output of 

predetermined intervals such as every few frames. comparator 306 is provided to a select input of multiplexer 

The offset sequence generator selects a one-to-one trans- 308. Multiplexer 308 receives zero as one of its inputs and 

formation function unique to each scan line for the RGB or a value of Max Value-Min Value at a second input. 

YC^C* color component signals. Each of the three color ^ 0Ut P ut multiplexer 308 is selected by the output of 

component outputs of offset sequence generator 200 is ^ the comparator 306. The output of multiplexer 308 is 

provided to one input of multiplexers 202, 204 and 206, provided to one input of an adder 310. The other input of 

respectively. The other inputs of multiplexers 202, 204 and adder 310 is connected to the output of subtractor 304. Thus, 

206 receive zero. The select input of multiplexers 202, 204 ^ the 0Ut P ut of subtracter 304 is less than the MinValue, the 

and 206 are driven by an encrypted region generator 201 value of Maxvalue-MinValue is added to the-output of the 

which stores a window indicating where pixels are 20 subtractor 304. 

encrypted. When the pixels are to be encrypted, the outputs Correspondingly, the output of subtractor 314 is provided 
of offset sequence generator 200 are used. Otherwise, the to one input of comparator 316. The other input of corn- 
outputs of multiplexers 202, 204 and 206 are zero. Each parator 316 is connected to MinValue. The output of corn- 
offset has the same maximum representable value as the P arator 316 is provided to a select input of multiplexer 318. 
video component color signals. 25 Multiplexer 318 receives zero as one of its input, and a value 

~ . c .j , - , ... nnT i of Max Value-Min Value at a second input. The output of 

Each of the video component color signals, either RGB , . . „ n . . , , 4 . f _ „i 

. _ ™ n . „ < nn , . t , „ j Ifr , multiplexer 318 is provided to one input of adder 320. The 

signals or YC R C„ signals, are provided to three dynamic *\ 4 . ,| . * < , t , c 

i £n *ma a no tv„ ™t„,^ «f o&er ^P ut of adder 320 13 connected to the output of 

range clamps 210, 214 and 218, respectively. The output oi . A ^ ^ ,i_ . . c u* * ■ 

4 . 6 , . ' . ~A a w i « subtractor 314. Further, the output of subtractor 324 is 

the dynamic range clamp 210 and multiplexer 202 are ' ♦ M£ tu *u • ♦ f 

. I , . 7 , r ( • l 30 provided to one input of comparator 326. The other input of 

provided to a one-to-one transform circuit such as adder 212. y • i > ♦ \*- 

Similarly, the output of dynamic range clamp 214 and ^ f f , a 5? T\ 

multiplexer 204 are provided to adder 216, and the output of Valu , e - Jh« °*P* of comparator 326 is provided to a select 

the dynamic range clamp 218 and the output of multiplexer ^ of * mul^»r3M^ich receives zero as one of * 

206 are provided to adder 220. The outputs of adders 212, £? ut a ? d f ^ °. f MaxValue-MinValue at a second input. 

11 c /nn a a 4 -a n a r> i t> 35 The output of multiplexer 328 is provided to one input of an 

216 and 220 are provided to video DAC 132. £ r . 4 c *K aaA ■ t . , 

4 . r ~ ■ adder 330. The other input of adder 330 is connected to the 

In case the input video signal B YC R C B each of dynamic output of subtractor 324. 

range clamps 210, 214 and 218 may implement the follow- ^ Qutput of addcr 31Q ^ added tQ fl gain/oflfeet adjust . 

ing functions: ment Wock ^ which restores the color component signal 

if input_component<Min Value then input_component= 40 t0 ^ or i gma i va lue prior to the scaling operation performed 

MinValue by one of the dynamic range clamps 210, 214 and 218 (FIG. 

if input_component>Max Value then input_component= 2). The output of gain/offset adjustment block 312 is in turn 

MaxValue provided to video drivers 152 (FIG. 1), Similarly, the output 

If the input video signal is RGB, each of dynamic range 0 f adder 320 is added to a gain/offset adjustment block 322 

clamps 210, 214 and 218 may implement the following 45 which restores the color component signal to its original 

function: value prior to the scaling operation performed by one of 

input_component=input_component* scaling_factor+ dynamic range clamps 210, 214 and 218 (FIG, 2). The 

offset where the scaling_f actor is less than one. output of the gain/offset adjustment block 322 is in turn 

The outputs of adders 212, 216 and 220 are presented to provided to video drivers 152 (FIG. 1). Also, the output of 

the video DAC 132 inputs for generating video output 50 adder 330 is added to a gain/offset adjustment block 332 

signals associated with each component color. which restores the color component signal to its original 

Turning now to FIG. 3, decryptor 150 of receiver 140 value prior to the scaling operation performed by one of 

(FIG. 1) is detailed. Decryptor 150 has an oflset sequence dynamic range clamps 210, 214 and 218 (FIG. 2). The 

generator 300 which is a counterpart of offset sequence output of the gain/offset adjustment block 332 is in turn 

generator 200 (FIG. 2). Offset sequence generator 300 55 provided to video drivers 152 (FIG. 1) for driving the 

receives as input a decrypted frame key signal and a line display device 160. 

increment signal. The decrypted frame key, generated by a Each offset generated by the offset sequence generator 

frame key decryptor 299, is used as a seed to a pseudo 200 (FIG. 2) or 300 should be applied to a time varying part 

random number generator in offset generator 300, while the of the scan line so that the offset value can not be deter- 

line increment input tells offset generator 300 that it needs 60 mined. If the addition of the offset causes the color compo- 

to generate three offset values for the next line that receiver nent signal value to overflow a maximum allowable signal 

140 (FIG. 1) is to render. value, then the signal value is "wrapped around" by sub- 

The offset generator 300 J s digital offset outputs are pro- tracting the maximum allowable signal value and adding a 

vided to a digital-to-analog converter (DAC) 302 which minimum allowable signal value. 

generates corresponding analog values for the three offset 65 The addition of the offsets on each scan line shifts the 

values. DAC 302 thus generates outputs which are associ- color component signal of each line in a different direction, 

ated with each component of the RGB color output. The which causes the undecoded color component signal to be 
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unviewable. Referring to FIG, 1, to decode the color com- 
ponent signal, receiver 140 regenerates the oflset for the 
current scan line using the decrypted frame key, and sub- 
tracts the oflset from the active region of the incoming color 
component signal. If the result is less than the minimum 5 
allowable signal value, then receiver 140 detects that a 
wrap-around, or an out-of-range condition, has occurred. If 
so, receiver 140 can add the maximum allowable value and 
subtract the minimum allowable value to compensate for 
wrap-around artifacts. 

In order to reduce sensitivity to noise, the maximum and 
minimum allowable values in the shifted signal are chosen 
with a margin relative to the unshifted color component 
signal maximum and minimum values. This prevents near 
maximum values from being decoded as near minimum 
values or vice versa due to noise. Further, to maintain 15 
tracking of the maximum and minimum values between 
transmitter and receiver, these values can be seat in known 
positions in the blanking interval from transmitter 110 to 
receiver 140. 

An alternative to wrapping-around the signal uses a 20 
transmission range which is twice as big as the original color 
component signal range. In this way, the addition of the 
offset would not cause the color component signal to exceed 
the transmission range. This alternative avoids the need to 
deal with wrap-around in transmitter 110 and receiver 140, 2S 
but it reduces the scrambling of the color component signal. 
Keeping the offset value constant across the scan line is 
advantageous in that receiver 140 does not need to duplicate 
the pixel clock used to convert digital pixel values to analog 
signals on the transmitter side. Moreover, the decoding 3Q 
process is not sensitive to pixel clock skew between trans- 
mitter 110 and receiver 140. As such, receiver 140 only 
needs to track the start of new lines which can be easily 
determined from the horizontal sync embedded in the video 
signal. 

FIGS. 4A and 4B are circuits representing an optional 35 
enhancement to further inhibit unauthorized recording of 
high definition program content. The circuits of FIGS. 4A 
and 4B allow transmitter 110 (FIG. 1) to provide an addi- 
tional random value on each scan line to shift active pixel 
components in time by an oflset amount. Receiver 140 (FIG. 40 
1) regenerates a pixel clock using a clock generator 424 
which locks on a horizontal sync component of the video 
signal. Hie clock generator 424 knows in advance the pixel 
clock frequency, which may be transmitted over the serial 
ports 128 and 142. 45 

The circuit of FIG. 4A shifts each pixel value in time 
within a predetermined pixel range. This operation protects 
against the possibility that a constant color may be used at 
a border of the video image and that this constant color, if 
known, may be used to overcome the decryption protection. 50 
To protect against this possibility, each pixel value is shifted 
in time within a particular pixel range. The shifting opera- 
tion is performed using a delay memory 408, a dual ported 
memory which provides a circular queue so that its output is 
a time-delayed version of the input values. Delay memory 55 
408 has a write port 402 and a read port 404. Component 
color values are provided to write port 402, and the delayed 
output is provided at read port 404. 

Dual-ported memory 408 allows simultaneous access to 
individual static RAM arrays by encryptor 120 (FIG. 1) to 60 
implement a circular queue. Since two simultaneous 
accesses to stored system information can be made during 
the same cycle, dual-ported memories access twice the 
amount of information as a single -ported memory running at 
the same speed. Alternatively, a shared memory with mul- 65 
tiplexed static RAMs may be used to implement the circular 
queue. 
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Receiver 140 (FIG. 1) needs to "undo" the time shift 
generated by the circuit of FIG. 4Aby digitizing the signal 
and using a variable delay first in first out memory to undo 
the time shift. The shift amount is limited to a portion of the 
blanking interval so that the undo operation does not inter- 
fere with sync recovery and transmission of the minimum/ 
maximum signal values. 

Referring now to FIG. 4B, the corresponding circuit to 
undo to the shift-operation provided by delay memory 408 
is shown. In FIG. 4B, color component values are provided 
to an analog- to-digital converter (ADC) 422. The output of 
ADC 422 is provided to a delay memory 426 which is 
similar to the delay memory 408 of FIG. 4A. The output of 
the delay memory is provided to a digital oflset remover 428 
for removing the oflset values associated with each compo- 
nent. The output of digital offset remover 428 is provided to 
a DAC 430. Additionally, a clock generator 424, which is 
phase locked relative to a video sync input, is provided to 
clock the operation of ADC 422, delayed memory 426, 
digital offset remover 428 and DAC 430. 

Turning now to FIG. 5, a flowchart 500 illustrating the 
operation of the system of FIG. 1 is shown. Referring to 
FIGS. 1 and 5, first, transmitter 110 indicates that a copy 
protected video program is available for viewing (step 502). 
In response, receiver 140 requests authentication from trans- 
mitter 110 (step 504) as discussed previously. Together, 
transmitter 110 and receiver 140 prove that they are autho- 
rized to receive the program (step 506). Next, the transmitter 
and the receiver agree to a session key which is used to 
encrypt a transmitted frame key (step 508). 

The transmitter transmits a new encrypted frame key 
periodically to receiver 140 (step 510). In response, the 
receiver decodes the encrypted frame key (step 512). 
Concurrently, the receiver decodes the encrypted key (step 
514) and displays the program on the monitor (step 516). 

FIG. 6 illustrates step 512 of FIG. 5 in more detail. 
Referring to FIGS. 1 and 6, first, a frame key is generated 
using a secret random number generator and the frame key 
is encrypted with the session key and transmitted to receiver 
140 (step 529). Next, a pseudo random number generator is 
initialized with the decrypted frame key previously gener- 
ated in step 508 (step 530). In step 540, for n frames, the 
following operations are performed: In step 550, for each 
encrypted scan line, the process 512 applies the pseudo 
random number generator to generate three onsets, each of 
which is associated with a color component value. Next, in 
step 560, for each pixel in each encrypted scan line, if the 
pixel is active, then for each RGB component, the process of 
step 512 adds the pixel to the clamped component and sends 
the pixel to the DAC for transmission. Next, in step 580, the 
value of each pixel is optionally shifted in time within a 
predetermined pixel range using a circuit such as that 
detailed in FIGS. 4A and 4B. 

After the current n frames have been processed in step 
540, the process of step 512 then points to the next n frames 
(step 590). The process of step 512 then checks whether the 
program has been completely displayed (step 592). If not, 
the process loops back to step 529. Alternatively, when the 
program is done, the process ends (step 594). 

A pseudo -code of FIG. 6 is as follows: 



//Encryption 

Authenticate and establish session key 
For entire program 

Generate a frame key using secret random number generator 
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-continued 



Encrypt frame key with session key and transmit to receiver 
Initiate pseudo random number generator with frame key 
Define encrypted region boundary and transmit to receiver 
For n frames 

For each encrypted scan line 
Generate 3 Random Ofisets 
For each pixel encrypted in encrypted region 
For each color component 

scale and add offset if RGB 
clamp if YC r Cb 
add pixel to result 

send pixels to DAC for each scan line 
Optionally shift pixel 
End For 
End For 
End For 
End For 
End For 



Referring now to FIGS. 1 and 7, the decryption process 
516 is illustrated in more detail. First, the frame key is 
decrypted using the session key (step 599). Next, as in the 
process 512 in FIG. 6, a pseudo random number generator 
on receiver 140 is initialized with the decrypted frame key 
(step 600). Then, in step 610, for each of the n frames, and 
for each encrypted scan liner (step 620), the pseudo random 
number generator is applied to generate three offsets. 
Further, for each pixel in the encrypted scan line, the offset 
is subtracted from the pixel value. If the result is less than 
the minimum value, an appropriate adjustment of 
Maxvalue-Min Value is added to the result of the subtraction 
process. In the event that the signal is RGB, a gain/offset 
adjustment operation is performed. 

Additionally, in the event of the encryption process 516 
performs the optional shift operation of step 580. (FIG. 6), 
the analog signal is digitized and pixel clock is recovered to 
undo the shift operation previously performed (step 650). 

After step 610, process 516 then points to the next n 
frames (step 660). Next, the process checks whether it has 
completed displaying the program (step 662). If not, the 
process loops back to step 599 to continue handling the next 
n frames. Alternatively, in the event that the encryption 
process is finished in step 662, the process ends (step 670). 
A pseudo-code of FIG. 7 is shown below: 



//Decryption 

Authenticate and establish session key 
For entire program 

Decrypt frame key with session key 

Initiate pseudo random number generator with frame key 

Define Encrypted Region Boundary 

For n frames 

For each encrypted scan line 
Generate 3 Random Offsets 
For each encrypted pixel 

Subtract offset from pixel value 
if result < MinVal, add MaxW-MinVW 
if ROB, perform gain/offset adjustment 
if pixels have been shifted, undo pixel shift 
operation 

End For 
End For 
End For 
End For 



Referring to FIG. 1, transmitter 110 can transmit the next 
frame key to the receiver 140 in advance so that the 
decryption of the frame key may occur in parallel with the 
rendering of the current frame. 
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Referring now to FIG. 8, a second embodiment of the 
transmitter- receiver pair is shown. The embodiment of FIG. 
8 is similar to the embodiment of FIG. 1 except that the 
video transmission is digital. Thus, like -numbered elements 

5 are the same as those in FIG. 1. In FIG. 8, transmitter 110 
receives high definition compressed bitstreams from net- 
work 102. Transmitter 110 communicates with network 102 
using network interface module (NIM) 112. The output of 
NIM 112 is an encrypted video bitstream which is directed 

10 to descrambler 114. Trie-output of descrambler 114 is pro- 
vided to MPEG decoder 116, which in turn provides a signal 
to on screen display (OSD) buffer 118 controlled by CPU 
122. 

CPU 122 is also connected to a digital encryptor 121 

15 which is shown in more detail in FIG. 9. The output of 
digital encryptor 121 is provided to a digital video interface 
133, which is connected to digital video cable 135. Video 
cable 135 may be bundled or combined with digital interface 
cable 130 as one cable or separately as two cables. 

20 Low bandwidth digital data is transmitted over the digital 
interface cable 130 to and from a serial port 142 on a digital 
receiver 141. Serial port 142 is connected to the microcon- 
troller or CPU 144. Microcontroller 144 in turn is connected 
to RAM 146 and ROM 148. Additionally, digital receiver 

25 141 receives digital video signals from digital video cable 
135. The video signals are processed by a digital decryptor 
151, which is shown in more detail in FIG. 10. The video 
content which appears at the output of digital decryptor 151 
is provided to video driver 152 which drives the display 

30 device 160. 

Referring now to FIG. 9, digital encryptor 121 is shown 
in more detail. Again the same numbering as FIG. 2 is used. 
Encryptor 121 (FIG. 1) has oflset sequence generator 200 
which receives as inputs an unencrypted frame key input and 

35 a line increment input. The offset,sequence generator selects 
a one-to-one transformation function unique to each scan 
line for the RGB or YC^C^ color component signals. Each 
of the three color component outputs of the offset sequence 
generator 200 is provided to one input of multiplexers 202, 

40 204 and 206, respectively. The other inputs of the multi- 
plexers 202, 204 arid 206 receive zero. The select input of 
the multiplexers 202, 204 and 206 are driven by encrypted 
region generator 201 which stores a window indicating 
where pixels are encrypted. 

45 Each of the video component color signals, either RGB 
signals or YC^C^ signals, are provided to one of three 
one-to-one transform circuits 212, 216 and 220, which may 
be adders. The other input of each of the one-to-one trans- 
form circuits 212, 216 and 220 receive the output of mul- 

50 tiplexers 202, 204 and 206, respectively. The outputs of 
circuits 212, 216 and 220 are presented to digital video 
interface 133 for transmission to the receiver 140 (FIG. 1). 

Turning now to FIG. 10, digital decryptor 151 on digital 
receiver 141 (FIG. 8) is detailed. Digital decryptor 151 has 

55 an oflset sequence generator 300 which is a counterpart of 
the oflset sequence generator 200 (FIG. 9). Offset sequence 
generator 300 receives as input a decrypted frame key signal 
and a line increment signal. 

Each of offset generator's digital offset outputs are pro- 

60 vided to one input of inverse transformation circuits such as 
subtractors 304, 314 and 324, respectively. The output of 
inverse transformation circuits such as subtractors 304, 314 
and 324 are in turn provided to video driver 152 (FIG. 8) for 
driving the display 160 (FIG. 8). In the event that display 

65 1 60 accepts analog inputs, a video DAC would be used on 
the output of digital decryptor 151 to convert the output to 
analog form. In the event that both analog and digital video 
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inputs and outputs are to be handled, the transmitter can 
include both analog and digital encryptors 120 and 121 
(FIGS. 1 and 8, respectively), and the receiver can include 
both analog and digital decryptors 150 and 151, respectively. 

The techniques described here may be implemented in 
hardware or software, or a combination of the two. Software 
may include microcode or conventional program imple- 
mented in a high level procedural or object-oriented pro- 
gramming language to communicate with a computer sys- 
tem. However, the programs can be implemented in 
assembly or machine language, if desired. 

In the event the techniques are implemented in computer 
programs executing on programmable computers with a 
processor, a storage medium readable by the processor 
(including volatile and nonvolatile memory and/or storage 
elements), and suitable input and output devices, the pro- 
gram code is applied to data from an input device to perform 
the functions described and to generate the encoded high 
definition video signal to be saved on a digitally recordable 
data storage device or transmitted over a medium. 

While the invention has been shown and described with 
reference to one or more embodiments thereof, those skilled 
in the art will understand that the above and other changes 
in form and detail may be made without departing from the 
spirit and scope of the following claims. 

What is claimed is: 

1. A method for controlling reproduction of video trans- 
mission between a transmitter and a receiver, the transmitter 
and the receiver communicating over a digital interface and 
a video interface, the video interface having a color com- 
ponent signal, comprising: 

communicating an encrypted frame key over the digital 
interface; 

generating a sequence of pseudo-random offsets for the 
color component signal based on the frame key; 

generating an encoded color component signal using one 
of the pseudo-random offsets; and 

transmitting the encoded color component signal over the 
video interface. 

2. The method of claim 1 further comprising seeding a 
pseudo random number generator with the frame key. 

3. The method of claim 1 further comprising: 
periodically generating a new frame key; and 
initializing a pseudo random number generator with the 

new frame key. 

4. The method of claim 1 further comprising: 

scaling the color component signal with a predetermined 
ratio. 

5. The method of claim 1 further comprising clamping the 
color component signal within a predetermined range. 

6. The method of claim 5 wherein the clamping step 
further comprises: 

determining if a value of the color component signal is 
less than a first value and if so, setting the value of the 
color component signal to the first value; and 

determining if the value of the color component signal is 
greater than a second value and if so, setting the value 
of the color component signal to the second value. 

7. The method of claim 6 further comprising: 
determining whether each pixel is in an encrypted bound- 
ary; and 

transmitting the pixel unencrypted if the pixel is outside 
of the encrypted boundary. 

8. The method of claim 1 further comprising converting 
the encoded color component signal to an analog signal. 
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9. The method of claim 1 further comprising shifting each 
pixel value in time within a predetermined pixel range, 

10. The method of claim 9 wherein the shifting further 
comprises providing the encoded color component signal to 
a delay memory. 

11. The method of claim 1 further comprising decrypting 
the encoded color component signal sent over the video 
interface. 

12. The method of claim 11 wherein the decrypting step 
further comprises: 

receiving the encrypted frame key over the digital inter- 
face; and 

generating the sequence of pseudo -random offsets for the 
encoded color component signal based on the 
encrypted frame key. 

13. The method of claim 11 further comprising seeding a 
pseudo random number generator with the frame key. 

14. The method of claim 11 further comprising subtract- 
ing the pseudo-random offset from the encoded color com- 
ponent signal. 

15. The method of claim 14 further comprising compen- 
sating for out-of -range values associated with the subtract- 
ing step. 

16. The method of claim 14 further comprising resealing 
the color component signal to its original input range. 

17. The method of claim 11 further comprising shifting 
each pixel value within a predetermined pixel range prior to 
the step of transmitting the encoded color component signal 
over the video interface. 

18. The method of claim 17 further comprising undoing 
the pixel shift operation using a delay memory. 

19. The method of claim 11 further comprising displaying 
the color component signal after decrypting the encoded 
color component signal. 

20. The method of claim 1 further comprising: 
adding the one of the pseudo -random offsets to the color 

component signal. 

21. A method for controlling the reproduction of a video 
transmission between a transmitter and a receiver, the trans- 
mitter and the receiver communicating over a digital inter- 
face and a video interface, the video interface having one or 
more color component signals, comprising: 

authenticating the transmitter and the receiver using the 

digital interface; 
periodically transmitting an encrypted frame key to the 

receiver over the digital interface; 
generating a pseudo-random offset at the transmitter for 

each color component signal during an active part of a 

scan line; 

adding the pseudo-random offset to the color component 
signal to generate an encoded color component signal; 

transmitting the encoded color component signal over the 
video interface; 

generating the pseudo -random offset at the receiver based 
on the decrypted frame key; 

removing the pseudo -random offset from the encoded 
color component signal transmitted over the video 
interface to generate a decoded color component signal; 
and 

displaying the decoded color component signal on a 
display device. 

22. A system for controlling the reproduction of video 
transmission between a transmitter and a receiver, the trans- 
mitter and the receiver communicating over a digital inter- 
face and a video interface, the digital interface communi- 
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eating a frame key between the transmitter and the receiver, 
the video interface having a color component signal, the 
system comprising: 

an encryptor, including: 

an offset generator adapted to receive the frame key and 
to generate a sequence of pseudo-random values for 
the color component; and 
an adder coupled to the offset generator and to the color 
component signal for providing. an encoded color 
component signal; 
a decryptor, including: 

a decryptor offset generator adapted to receive and 
decrypt the frame key and to generate a decryptor 
pseudo-random value for the color component 
signal; and 
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a sub tractor coupled to the decryptor offset generator 
and to the color component signal for subtracting 
the decryptor pseudo-random value from the color 
component signal. 

23. The system of claim 22 wherein the color component 
signal includes one of red, green and blue (RGB) video 
signals. 

24. The system of claim 22 wherein the color component 
signal includes one of luminance and chrominance video 
signals. 

25. The system of claim 22 wherein the color component 
signal is a black and white video signal. 
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